What's new in the IBM Messaging Family

Transcription

1 What's new in the IBM Messaging Family Mark Taylor, IBM Hursley Capitalware's MQ Technical Conference v

2 Timeline Multi-instance QMGR Multiple cluster XMIT queue MQI Assured delivery Multi-platform V1.1 IBM MQSeries V2 Pub/sub V2.1 Mobile V5 V5.1 XML V5.2 JMS SSL SOAP IBM MQ Everyplace Common criteria Eclipse.NET HTTP AJAX REST Web 2.0 V5.3 IBM MQTT JMS 1.1 RCMS IBM MQ Low Latency 1990s 2000s 2010s V6 Managed File Transfer V7 Hypervisors V7.0.1 IBM MQ Managed File Transfer Integrated Messaging V7.1 V7.5 IBM MQ Advanced Message Security IBM MQ Advanced System Pattern Application Pattern V8 20th Anniversary of MQ at IMPACT IBM MessageSight IBM MQ Appliance IBM MQ Advanced for Developers IBM MQ Light

3 End of Service for old platforms and versions MQ V7.0.0 and V7.0.1 for multiplatforms EOM, EOS effective September 2015 V7.0 will have had more than 7 years of support MQ V7.0.1 for z/os EOM, EOS effective September 2015 V7.0.0 already out of service MQ V3 for VSE EOM, EOS effective September 2015 Extended support contracts available MQ V6 for OpenVMS: EOS effective April 2016

4 MQ Appliance

5 Introducing IBM MQ Appliance The scalability and security of IBM MQ V8 Integrates seamlessly into MQ networks and clusters Familiar administration model for administrators with MQ skills The convenience, fast time-to-value and low total cost of ownership of an appliance Ideal for use as a messaging hub running queue managers accessed by clients, or to extend MQ connectivity to a remote location General availability 13 March 2015

6 Key characteristics of the IBM MQ Appliance MQ V8 (+/-) delivered as a state-of-the-art appliance Built using the latest DataPower appliance hardware and OS Firmware includes the MQ V8 product and capabilities Participates in MQ networks or clusters Existing MQ applications connect as clients, with no code changes Two models, to suit different uses and performance requirements Either model of appliance can run multiple queue managers, subject to overall throughput Familiar administration concepts and syntax, with a choice of interfaces Familiar security model for authentication and authorisation of messaging users, with greater flexibility for scalable administration Built-in High Availability Per queue manager monitoring and automatic restart/failover Without external dependencies like shared file systems or disks

7 Key differences compared with installable MQ Hub pattern; no applications deployed to the appliance Applications must connect as remote clients No user exits can be run on the appliance CHLAUTH and application activity trace Appliance-specific HA technology With no shared file system or shared disk Authentication and authorisation via on-board or central repository Command-line interface on the appliance is not a general-purpose shell Has familiar commands for things you need e.g. no runmqlsr, because MQ listeners run under QM control Some monitoring information (included application activity trace) activated and produced differently pub/sub

8 MQ News

9 IBM MQ V8 delivering best in class enterprise messaging Platforms & Standards Security Scalability System z exploitation 64-bit for all platforms Userid authentication via OS & LDAP Multiplexed client performance 64-bit buffer pools in MQ for z/os means less paging, more performance Multiple Cluster Transmit Queue on all platforms User-based authorisation for Unix Queue manager vertical scaling Performance and capacity Support for JMS 2.0 AMS for IBM i & z/os Publish/Subscribe improvements Performance enhancements for IBM Information Replicator (QRep) Improved support for.net and WCF DNS Hostnames in CHLAUTH records Routed publish/subscribe Exploit zedc compression accelerator SHA-2 for z, i & NSS Multiple certificates per queue manager SMF and shared queue enhancements

10 MQ V8 Dates Announce: 22 April 2014 Availability: 23 May 2014 (ega Distributed) 13 June 2014 (z/os and pga Distributed) FP3 on Distributed platforms now available On z/os, PI19721 for migration PTF Also recommended PI19991 QTYPE APAR

11 FixPacks and "Continuous Delivery" V FixPack released June 18 for all distributed platforms As in previous V8 updates, new function alongside the usual APARs Some new function automatically enabled, some requires specific configuration Often gated by CMDLEVEL (similar to NEWFUNC on z/os) Have to restart queue manager to say that you want to use new configuration strmqm e CMDLEVEL=802 QMGR CMDLEVEL has no direct relationship to VRMF CMDLEVEL associated with V was 801

12 Platforms New MQ platform: Power Linux little-endian Part of a broader portfolio of IBM software for this platform New support for SELinux configurations See Statement of Direction for MQ V8 on HP NonStop "IBM intends to introduce a new release of IBM MQ for the HP NonStop platform that is based on IBM MQ V8. It is intended for this offering to be available for both the HP Integrity NonStop servers on Intel Itanium, and compatible also for the new HP NonStop platform on x86 architecture. It is planned for this offering to be designed to deliver the capabilities of the current IBM MQ V8 product, but with optimizations for the HP NonStop platform, and will work with other IBM MQ and WebSphere MQ offerings."

13 Platforms - MQ in Docker A technical preview Docker image for MQ Advanced for Developers is now available on Docker Hub. Runs an MQ queue manager inside a container, isolated from the rest of your system You can create your own customized image, using this image as a parent, for example, to: Run MQSC commands to configure the queue manager Add users and groups This is a technical preview and we would like to receive feedback

14 MQ Security - Authorisation using LDAP Fixpack 2 for Unix/Linux/i builds on LDAP authentication feature User and group information can now be centrally located in LDAP No need to define OS users/groups other than mqm And "mqm" group loses a lot of its automatic power setmqaut t qmgr p "cn=user 1,ou=users,o=ibm,c=uk" +connect setmqaut t qmgr g "cn=group 1,ou=groups,o=ibm,c=uk" +connect Extended attributes on AUTHINFO/IDPWLDAP object show how to discover groups Very similar to the authentication attributes for discovery of identities Requires queue manager command level to be updated Similar to NEWFUNC on z/os strmqm e CMDLEVEL=801 QMgr Authorities can be set for individual users Does not use "primary groups" New in FP2

15 MQ Security Authentication via PAM For Unix platforms Configure authentication to go via PAM modules Gives more flexibility in mechanisms for verification and account validation For example, use in conjunction with nsswitch to store Unix account information in Active Directory Requires queue manager command level to be updated Similar to NEWFUNC on z/os strmqm e CMDLEVEL=802 QMgr AUTHENMD(OS PAM) as attribute on AUTHINFO(IDPWOS) New in FP3

16 CipherSpec currency : Security vulnerabilities with cool names Heartbleed, POODLE, BEAST, FREAK, Bar Mitzvah, LogJam Secure protocols as well as crypto algorithms found to have vulnerabilities Before V , 44 different CipherSpecs to choose from SSLv3, TLSv1.0, TLSv1.2 With V , subset of just 17 CipherSpecs TLSv1.0, TLSv1.2 Predominantly Ecliptic Curve, AES and SHA-2 based It is possible, but not recommended, to re-enable the older CipherSpecs Environment variable or qm.ini Errors if you define or start a channel with a deprecated CipherSpec Changes also made to older in-service versions of MQ Updates in FP3

17 Distributed Performance: Persistent Messaging An AIX system: Max performance increased from 16K to 19K

18 Distributed Performance: Non-persistent Messaging A Windows system: Max performance increased from 90K to 121K

19 z/os Performance: Sample CPU saving using large buffer pools

20 Extended Start events Allows system monitoring applications to see when a multi-instance qmgr has failed over and where it is now running Event now includes a reason and the hostname where qmgr is running New MQRQ values failover permitted, failover not permitted, started from standby Live demo at New in FP3 Event Type Reason Event created Queue Mgr Name Host Name Reason Qualifier : Queue Mgr Event : Queue Mgr Active : 2015/06/16 10:24:58.02 GMT : V8003_A : rockall.hursley.ibm.com : Failover Not Permitted

21 Monitoring the MQ Appliance The MQ Appliance will automatically generate status information Uses pub/sub to support multiple consumers Sample program shipped in V amqsrua/amqsruac Also source code Shows system resource usage, not just MQ CPU, Disk usage, MQI counts etc Subscribe to metadata showing which statistics can be obtained More flexible than a fixed set Then subscribe to topics for each statistic New in FP3

22 New function: Extended channel exit interface Channel exits are now told more information about what is at the other end of the connection MQCXP structure contains RemoteProduct and RemoteVersion fields Gives VRMF of what is connecting eg (interpreted as ) Blank implies V6 or older Gives type of connection client (C, Java etc), queue manager (Dist, z/os) Typical use to allow an exit to block connections from backlevel clients RPRODUCT strings are described in DIS CHSTATUS Search for q086090_ in KnowledgeCenter New in FP3

23 JMS and Java JMS to be supported inside CICS CICS APAR For V5.2 PI32151 MQ APARs For V71: JMS PI29770 (supercedes ) or later CSD For V8: JMS or later CSD + MQ base PI28482 CipherSuite names for non-ibm Java runtimes There is no fixed standard across Java providers for CipherSuite names When POODLE SSL vulnerability announced, it was difficult to use TLS algorithms in MQ Java because names in configuration had to match IBM's Java names Have now relaxed some of that checking to make use of other Javas easier IV66840: ADD SUPPORT FOR SELECTED TLS CIPHERSPECS WHEN RUNNING IN NON-IBM JAVA RUNTIME ENVIRONMENT Java client now available for simpler redistribution

24 .Net enhancements MQ.Net classes can now use SSL without needing the C client installed A secure fully-managed.net implementation Uses Windows native certificate stores For MQ.NET classes (aka Base.NET Classes) SSL properties can be set at MQEnvironment.cs Hashtable properties (input parameter to MQQueueManager constructor) For XMS.NET, SSL properties can be set as ConnectionFactory properties WCF interface extended to non-soap, non-jms messages Making it easier for apps using WCF to communicate with any other MQ application MQ.Net classes restructured for easier deployment (New in FP2) Applications can be deployed incorporating the MQ assembly Includes Azure environment

25 MQ Pattern Type for Pure Application System MQ as a Software Component plus supporting script packages Prerequisite to building a deployable Pattern All wrapped up in an easy to consume MQ PatternType Different mission to the previous hypervisor and Virtual Application deliverables OS and Software now separated

26 Some SupportPacs now on github Source code to make it easier to extend platform coverage Can accept public submissions for new function (or bug fixes) Includes MA01 and MO03 (q and qload) See

27 MQ Light MQ Light as a Service MQ Light in MQ

28 IBM Messaging Deliver Messaging Backbone for Enterprise Focus on traditional MQ values, rock-solid enterprise-class service, ease-of-operation, breadth of platform coverage, availability, z/os exploitation Enable Developers to build more scalable, responsive applications Development agility Focus on app use cases, & breadth of languages, ease-of-deployment, micro Enterprise quality services, integration with of Service developer frameworks

29 MQ Light : Software and Cloud Messaging that application developers will love to use, helping them make responsive applications that scale easily 3 ways to get it: MQ Light software download Bluemix service Statement of Direction for support in MQ Version 8. Open APIs crafted to feel natural in a growing range of popular languages Tooling that makes modular app development easy 29

30 MQ Light API - Language support Node.js AMQP 1.0 Open, standard, wire protocol Node.js PHP Python Ruby Java* *JMS 1.1 in Bluemix today Idiomatic APIs for each language. New clients can be created by developers Clients based on Open source Apache Qpid Proton Using open protocol (AMQP 1.0) to build community around messaging clients 30

31 Deployment options MQ Light IBM MQ MQ Light for Bluemix Developer coding in Python, Ruby, JavaScript, Java, C#, PHP Builds application and uses MQ Light messaging and tests in local developer sandbox Deploy seamlessly to MQ Light, MQ or MQ Light Service 31

32 MQ Light Service in Bluemix 32

33 MQ Light in Docker A Docker image for MQ Light is now available on Docker Hub. MQ Light runs inside a container, isolated from the rest of your system: Process isolation all the processes associated with MQ Light are run in their own process space, and can t see any other processes running on your server Resource isolation you can limit the amount of memory and CPU you allocate to a container Dependency isolation - all software which MQ Light depends on is included in the MQ Light image, except the Linux kernel itself. Docker also helps with fast, reliable deployments in cloud environments One command to download and run MQ Light: docker run e LICENSE=accept P ibmimages/mqlight

34 MQ Light Support in IBM MQ 4Q13 2Q14 3Q14 1Q15 MQ Light GA MQ Light Service GA Regular Updates to Early Access IBM MQ V IBM MQ - MQ Light Tech Preview MQ Light Alpha MQ V8 Announce Statement of Direction - MQ Light Support in IBM MQ MQ Light Beta 34

35 Tech Preview - Available now IBM MQ MQ Light Tech Preview Platforms Windows, Linux x86_64 Installation Prereq is IBM MQ V Add Tech Preview install media (zip, rpm) Updates with FP3 Adds AMQP 1.0 channels Fully interoperable with MQ FAP and MQTT Channels MQSC and PCF support Defining AMQP channels Start, stop and end channel V updated MQ Light Tech Preview has further integration MQ Explorer support for the AMQP channels Use of CHLAUTH rules to control connections Use of the queue manager keystore for TLS connections 35

36 Future Activity

37 Continuous Delivery Expect more features to be delivered via service stream For both z/os and Distributed products FP2 included LDAP authorisation and MQ Light (AMQP) integration FP3 included PAM authentication More features expected to turn up in FP4 and beyond Active beta program for z/os to try out some new features

38 Any questions?